Conversation
Edited 9 days ago

Wake up, Fedi, new Matrix attack just dropped.

https://chir.rs/Q

Research by @charlotte

6
3
0

@soatok link shows access denied xml

1
0
0

@gsuberland https://chir.rs/Q redirects there, maybe it's an auth thing I haven't figured out

EDIT: Nope, trailing slash thing. Oops.

0
0
0

@soatok just returns a AccessDenied for me

2
0
0

@aliceif @privateger Ah. My habit of removing trialing slashes bites me again

1
0
0

@soatok @aliceif @privateger you are not going to like it when my shortlinks get to /

1
0
2

@soatok @charlotte Reaffirming my decision to stop using Matrix, between vulns like this and plain old usability issues.

0
0
0

@soatok @charlotte

Waiting for Matthew to pop up to exclaim in a most handwavery fashion how this is totally not a problem and that matrix needs more money.

1
1
0

@ck @charlotte I'm willing to bet a Matrix evangelist will show up first.

0
0
0